May 2020 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2020:0739-1: moderate: Recommended update for python-boto
by maintenance＠opensuse.org 29 May '20

29 May '20

openSUSE Recommended Update: Recommended update for python-boto ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0739-1 Rating: moderate References: #1171769 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-boto fixes the following issues: - Update in SLE-15: (bsc#1171769) - Fix build under python3.8 by skipping more tests that break with previous release. - Skip the tests for the flavors not being built - Remove old comment - Fix breakages caused by removing boto.cacerts module which is imported elsewhere in the package. The file boto/cacerts/cacerts.txt is removed instead, and boto-no-builtin-certs.patch is trimmed. - Activate the test suite, adding many build dependencies with versions. 11 failing Cloudfront signings tests are skipped only on Python 3. - Add versions to runtime dependencies. - python-rsa is added as a Recommends as it is needed for Cloudfront. - python-requests is added as a Recommends as it is needed for Cloudsearch. - python-requests is added as a Suggests as it is used for contrib ymlmessage. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-739=1 Package List: - openSUSE Leap 15.1 (noarch): python2-boto-2.49.0-lp151.2.6.1 python3-boto-2.49.0-lp151.2.6.1 References: https://bugzilla.suse.com/1171769

1 0

openSUSE-SU-2020:0734-1: Security update for jasper
by opensuse-security＠opensuse.org 29 May '20

29 May '20

openSUSE Security Update: Security update for jasper ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0734-1 Rating: low References: #1092115 Cross-References: CVE-2018-9154 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for jasper fixes the following issues: - CVE-2018-9154: Fixed a potential denial of service in jpc_dec_process_sot() (bsc#1092115). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-734=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): jasper-2.0.14-lp151.4.6.1 jasper-debuginfo-2.0.14-lp151.4.6.1 jasper-debugsource-2.0.14-lp151.4.6.1 libjasper-devel-2.0.14-lp151.4.6.1 libjasper4-2.0.14-lp151.4.6.1 libjasper4-debuginfo-2.0.14-lp151.4.6.1 - openSUSE Leap 15.1 (x86_64): libjasper4-32bit-2.0.14-lp151.4.6.1 libjasper4-32bit-debuginfo-2.0.14-lp151.4.6.1 References: https://www.suse.com/security/cve/CVE-2018-9154.html https://bugzilla.suse.com/1092115

1 0

openSUSE-SU-2020:0738-1: important: Security update for mariadb-connector-c
by opensuse-security＠opensuse.org 29 May '20

29 May '20

openSUSE Security Update: Security update for mariadb-connector-c ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0738-1 Rating: important References: #1171550 Cross-References: CVE-2020-13249 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for mariadb-connector-c fixes the following issues: Security issue fixed: - CVE-2020-13249: Fixed an improper validation of OK packets received from clients (bsc#1171550). Non-security issues fixed: - Update to release 3.1.8 (bsc#1171550) * CONC-304: Rename the static library to libmariadb.a and other libmariadb files in a consistent manner * CONC-441: Default user name for C/C is wrong if login user is different from effective user * CONC-449: Check $MARIADB_HOME/my.cnf in addition to $MYSQL_HOME/my.cnf * CONC-457: mysql_list_processes crashes in unpack_fields * CONC-458: mysql_get_timeout_value crashes when used improper * CONC-464: Fix static build for auth_gssapi_client plugin This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-738=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libmariadb-devel-3.1.8-lp151.3.12.1 libmariadb-devel-debuginfo-3.1.8-lp151.3.12.1 libmariadb3-3.1.8-lp151.3.12.1 libmariadb3-debuginfo-3.1.8-lp151.3.12.1 libmariadb_plugins-3.1.8-lp151.3.12.1 libmariadb_plugins-debuginfo-3.1.8-lp151.3.12.1 libmariadbprivate-3.1.8-lp151.3.12.1 libmariadbprivate-debuginfo-3.1.8-lp151.3.12.1 mariadb-connector-c-debugsource-3.1.8-lp151.3.12.1 - openSUSE Leap 15.1 (x86_64): libmariadb3-32bit-3.1.8-lp151.3.12.1 libmariadb3-32bit-debuginfo-3.1.8-lp151.3.12.1 References: https://www.suse.com/security/cve/CVE-2020-13249.html https://bugzilla.suse.com/1171550

1 0

openSUSE-RU-2020:0735-1: moderate: Recommended update for mdadm
by maintenance＠opensuse.org 29 May '20

29 May '20

openSUSE Recommended Update: Recommended update for mdadm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0735-1 Rating: moderate References: #1106078 #1111960 #1115407 #1123814 #1126975 #1127526 #1129900 #1139709 #1153258 #1156040 #1162479 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 11 recommended fixes can now be installed. Description: This update for mdadm fixes the following issues: - Fix for issue to avoid unexpected switching from raid0 to raid4 by using option '--grow'. (bsc#1129900) - Add support for RAID0 layouts. (bsc#1162479) - Enable mdadm to scan more than 6 operation ROMs. (bsc#1156040) - Fix for finishing recovery when drive with rebuild fails. (bsc#1126975) - Migrate cron jobs to system timer and implement systemd unit files. (bsc#1115407) - Install mdadm environment script to 'usr/lib' (bsc#1111960) - Fix for symlinks that may break MD RAID autorebuild. (bsc#1106078) - Add '--no-devices' option for calling mdadm. (bsc#1139709) - Fix for ignoring option 'MDADM_CHECK_DURATION' in systemd configuration. (bsc#1153258) - Update SLE15-SP1 mdadm code base to 4.1. (bsc#1111960, jsc#SLE-10078, jsc#SLE-9348) - Fix for md monitor that can corrupt metadata during reboot within OS installation (bsc#1127526) - Fix for displaying wrong names in device names in listing. (bsc#1123814) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-735=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): mdadm-4.1-lp151.4.9.1 mdadm-debuginfo-4.1-lp151.4.9.1 mdadm-debugsource-4.1-lp151.4.9.1 References: https://bugzilla.suse.com/1106078 https://bugzilla.suse.com/1111960 https://bugzilla.suse.com/1115407 https://bugzilla.suse.com/1123814 https://bugzilla.suse.com/1126975 https://bugzilla.suse.com/1127526 https://bugzilla.suse.com/1129900 https://bugzilla.suse.com/1139709 https://bugzilla.suse.com/1153258 https://bugzilla.suse.com/1156040 https://bugzilla.suse.com/1162479

1 0

openSUSE-RU-2020:0737-1: moderate: Recommended update for docker-runc
by maintenance＠opensuse.org 29 May '20

29 May '20

openSUSE Recommended Update: Recommended update for docker-runc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0737-1 Rating: moderate References: #1168481 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for docker-runc contains the following fixes: - Backport upstream fix that enable access to /dev/null in containers. Resolves many issues with the implementation of the runc devices cgroup code. Removes some of the disruptive aspects of "runc update". (bsc#1168481) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-737=1 Package List: - openSUSE Leap 15.1 (x86_64): docker-runc-1.0.0rc8+gitr3917_3e425f80a8c9-lp151.3.18.1 docker-runc-debuginfo-1.0.0rc8+gitr3917_3e425f80a8c9-lp151.3.18.1 References: https://bugzilla.suse.com/1168481

1 0

openSUSE-SU-2020:0736-1: Security update for sysstat
by opensuse-security＠opensuse.org 29 May '20

29 May '20

openSUSE Security Update: Security update for sysstat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0736-1 Rating: low References: #1159104 Cross-References: CVE-2019-19725 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for sysstat fixes the following issues: - CVE-2019-19725: Fixed double free in check_file_actlst in sa_common.c (bsc#1159104). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-736=1 Package List: - openSUSE Leap 15.1 (x86_64): sysstat-12.0.2-lp151.3.15.1 sysstat-debuginfo-12.0.2-lp151.3.15.1 sysstat-debugsource-12.0.2-lp151.3.15.1 sysstat-isag-12.0.2-lp151.3.15.1 References: https://www.suse.com/security/cve/CVE-2019-19725.html https://bugzilla.suse.com/1159104

1 0

openSUSE-RU-2020:0732-1: moderate: Recommended update for glibc
by maintenance＠opensuse.org 29 May '20

29 May '20

openSUSE Recommended Update: Recommended update for glibc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0732-1 Rating: moderate References: #1162930 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for glibc fixes the following issues: - nptl: wait for pending setxid request also in detached thread. (bsc#1162930) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-732=1 Package List: - openSUSE Leap 15.1 (i586 i686 x86_64): glibc-2.26-lp151.19.15.1 glibc-debuginfo-2.26-lp151.19.15.1 glibc-debugsource-2.26-lp151.19.15.1 glibc-devel-2.26-lp151.19.15.1 glibc-devel-debuginfo-2.26-lp151.19.15.1 glibc-devel-static-2.26-lp151.19.15.1 glibc-locale-2.26-lp151.19.15.1 glibc-locale-base-2.26-lp151.19.15.1 glibc-locale-base-debuginfo-2.26-lp151.19.15.1 glibc-profile-2.26-lp151.19.15.1 - openSUSE Leap 15.1 (i586 x86_64): glibc-extra-2.26-lp151.19.15.1 glibc-extra-debuginfo-2.26-lp151.19.15.1 glibc-utils-2.26-lp151.19.15.1 glibc-utils-debuginfo-2.26-lp151.19.15.1 glibc-utils-src-debugsource-2.26-lp151.19.15.1 nscd-2.26-lp151.19.15.1 nscd-debuginfo-2.26-lp151.19.15.1 - openSUSE Leap 15.1 (noarch): glibc-html-2.26-lp151.19.15.1 glibc-i18ndata-2.26-lp151.19.15.1 glibc-info-2.26-lp151.19.15.1 - openSUSE Leap 15.1 (x86_64): glibc-32bit-2.26-lp151.19.15.1 glibc-32bit-debuginfo-2.26-lp151.19.15.1 glibc-devel-32bit-2.26-lp151.19.15.1 glibc-devel-32bit-debuginfo-2.26-lp151.19.15.1 glibc-devel-static-32bit-2.26-lp151.19.15.1 glibc-locale-base-32bit-2.26-lp151.19.15.1 glibc-locale-base-32bit-debuginfo-2.26-lp151.19.15.1 glibc-profile-32bit-2.26-lp151.19.15.1 glibc-utils-32bit-2.26-lp151.19.15.1 glibc-utils-32bit-debuginfo-2.26-lp151.19.15.1 References: https://bugzilla.suse.com/1162930

1 0

openSUSE-RU-2020:0733-1: moderate: Recommended update for vncmanager
by maintenance＠opensuse.org 29 May '20

29 May '20

openSUSE Recommended Update: Recommended update for vncmanager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0733-1 Rating: moderate References: #1169732 #1171344 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for vncmanager fixes the following issues: - Fix tight compression decoder on big-endian systems. (bsc#1171344) - Fix tight decoder with 888 pixel encodings. (bsc#1169732) - Fix PixelFormat::ntoh() and PixelFormat::hton(). (bsc#1169732) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-733=1 Package List: - openSUSE Leap 15.1 (x86_64): vncmanager-1.0.2-lp151.5.3.1 vncmanager-debuginfo-1.0.2-lp151.5.3.1 vncmanager-debugsource-1.0.2-lp151.5.3.1 References: https://bugzilla.suse.com/1169732 https://bugzilla.suse.com/1171344

1 0

openSUSE-RU-2020:0729-1: moderate: Recommended update for mrsh
by maintenance＠opensuse.org 28 May '20

28 May '20

openSUSE Recommended Update: Recommended update for mrsh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0729-1 Rating: moderate References: #1144051 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mrsh fixes the following issues: - Use systemd_ordering instead of systemd_requires: systemd is never a strict requirement; but in case the system is scheduled for installation together with systemd, we want systemd to be installed prior to mrsh. - Add pam_keyinit.so to /etc/pam.d/mrsh|mrlogind. (bsc#1144051) To fully support the use of kernel keyrings by systemd the mrsh package must include the pam_keyinit.so module in its mrsh and mrlogin configuration files. - Add README.SUSE: Describe the steps required to set up and run mrshd/mrlogind. - Add missing services in pre/post/preun/postun scripts. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-729=1 Package List: - openSUSE Leap 15.1 (x86_64): mrsh-2.12-lp151.4.3.1 mrsh-debuginfo-2.12-lp151.4.3.1 mrsh-debugsource-2.12-lp151.4.3.1 mrsh-rsh-compat-2.12-lp151.4.3.1 mrsh-rsh-server-compat-2.12-lp151.4.3.1 mrsh-server-2.12-lp151.4.3.1 mrsh-server-debuginfo-2.12-lp151.4.3.1 References: https://bugzilla.suse.com/1144051

1 0

openSUSE-RU-2020:0730-1: moderate: Recommended update for zlib
by maintenance＠opensuse.org 28 May '20

28 May '20

openSUSE Recommended Update: Recommended update for zlib ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0730-1 Rating: moderate References: #1138793 #1166260 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for zlib fixes the following issues: - Including the latest fixes from IBM (bsc#1166260) IBM Z mainframes starting from version z15 provide DFLTCC instruction, which implements deflate algorithm in hardware with estimated compression and decompression performance orders of magnitude faster than the current zlib and ratio comparable with that of level 1. - Add SUSE specific fix to solve bsc#1138793. The fix will avoid to test if the app was linked with exactly same version of zlib like the one that is present on the runtime. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-730=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libminizip1-1.2.11-lp151.5.6.1 libminizip1-debuginfo-1.2.11-lp151.5.6.1 libz1-1.2.11-lp151.5.6.1 libz1-debuginfo-1.2.11-lp151.5.6.1 minizip-devel-1.2.11-lp151.5.6.1 zlib-debugsource-1.2.11-lp151.5.6.1 zlib-devel-1.2.11-lp151.5.6.1 zlib-devel-static-1.2.11-lp151.5.6.1 - openSUSE Leap 15.1 (x86_64): libminizip1-32bit-1.2.11-lp151.5.6.1 libminizip1-32bit-debuginfo-1.2.11-lp151.5.6.1 libz1-32bit-1.2.11-lp151.5.6.1 libz1-32bit-debuginfo-1.2.11-lp151.5.6.1 zlib-devel-32bit-1.2.11-lp151.5.6.1 zlib-devel-static-32bit-1.2.11-lp151.5.6.1 References: https://bugzilla.suse.com/1138793 https://bugzilla.suse.com/1166260

1 0